$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/712ce186-3f65-3b01-bf97-438903031744.roa File: 712ce186-3f65-3b01-bf97-438903031744.roa (raw, json) Hash identifier: h8nPtK/LJE5yL0ZRQ0ibJSEydS+2uaKmG6RgRs+LBMQ= Subject key identifier: 11:7C:9B:75:5C:46:E7:4D:C4:CB:EA:00:E5:F6:5E:D1:EC:E6:B2:E8 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584993FA092742465341AE6A0300 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/712ce186-3f65-3b01-bf97-438903031744.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 41264 IP address blocks: 104.133.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:fa:09:27:42:46:53:41:ae:6a:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=4d646374-2a25-4d32-a808-494f2543e2d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d8:ea:e7:4b:88:86:b7:dd:11:3a:d6:5b:c9: da:78:93:f5:0b:80:cc:70:52:86:1f:af:b2:d1:a5: 3e:cf:d4:a2:d1:05:dc:cd:40:87:f3:61:ed:3d:fc: 17:ea:f9:f3:17:b1:ef:f8:c6:6a:75:aa:75:4b:fc: 8f:87:b9:e7:bd:ff:6e:71:c2:a5:0a:aa:46:5a:a0: 22:91:8e:27:f5:4a:f1:d3:18:21:fb:b5:e7:fc:eb: 2b:7d:cb:f5:ff:6d:66:d4:a2:05:0a:9a:23:d4:2d: c6:73:96:64:59:bf:b2:ce:6e:b6:5a:33:d7:c7:ef: 22:be:20:0b:ab:f3:1e:13:b4:53:4e:b6:07:90:1d: 0f:6d:5b:b2:3d:3a:a5:ae:c1:46:82:6e:72:07:8b: 57:9c:51:98:6d:31:31:58:81:90:5b:f1:61:91:a9: 6f:3f:03:95:58:d6:90:0d:2c:69:0d:d1:34:73:ec: 50:9b:93:2c:0b:9d:8a:f7:ad:09:14:5e:b0:37:65: cd:da:b4:a9:8c:31:24:2e:1a:8e:a3:dd:04:41:f3: e7:24:b3:6c:9e:1c:0b:58:27:e6:d8:a2:82:f2:ac: ba:2c:b2:05:7c:1a:7a:9a:e4:65:e8:0c:02:c4:ad: 4e:80:b7:b0:c8:5a:6a:ec:6c:6f:9e:b6:7a:bf:5f: ff:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:7C:9B:75:5C:46:E7:4D:C4:CB:EA:00:E5:F6:5E:D1:EC:E6:B2:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/712ce186-3f65-3b01-bf97-438903031744.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.133.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:0f:1d:49:dc:e9:68:a4:5a:7e:cc:32:66:ee:54:a1:5b:ae: 40:28:17:d3:ac:ec:ca:8d:b2:5a:7f:91:27:4d:bb:2d:69:6d: 9c:dd:a8:99:02:ce:1c:e1:b2:f7:83:d7:0b:59:6e:c9:53:a0: 14:f7:5c:6d:e7:b7:ee:80:20:b0:43:f1:d2:21:b7:ca:49:11: cb:60:3b:39:20:45:7b:db:27:6a:01:51:c8:5b:6f:79:f4:9c: e8:06:14:f4:a1:ba:01:8b:6b:92:63:32:0d:a3:79:6d:dc:ae: 4f:63:f5:a4:13:89:0f:3f:ab:df:4d:ea:12:93:a2:26:9b:c2: 3e:33:6e:9a:07:55:5f:53:97:b2:c6:56:3f:5f:7c:3a:71:07: 0b:b9:ad:a2:c6:79:85:20:4c:cc:dc:6e:52:7c:38:9a:11:5e: b3:d0:6d:4c:0d:b0:5c:85:e4:04:f9:31:98:99:2b:d5:27:58: 10:a7:6e:08:06:2f:e0:cc:db:31:cc:a2:be:f9:4a:ab:7e:af: 95:2d:29:ed:0e:16:e6:b7:f5:11:54:68:8e:69:79:c4:88:3c: 46:ab:4d:75:3b:40:d3:35:b1:15:b6:dc:75:44:87:e9:6d:fe: eb:8a:18:57:ec:5c:b9:aa:aa:34:e4:0f:ed:b5:47:42:67:c2: 97:23:4a:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+gknQkZTQa5qAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk NGQ2NDYzNzQtMmEyNS00ZDMyLWE4MDgtNDk0ZjI1NDNlMmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1djq50uIhrfdETrWW8naeJP1C4DMcFKGH6+y 0aU+z9Si0QXczUCH82HtPfwX6vnzF7Hv+MZqdap1S/yPh7nnvf9uccKlCqpGWqAi kY4n9Urx0xgh+7Xn/Osrfcv1/21m1KIFCpoj1C3Gc5ZkWb+yzm62WjPXx+8iviAL q/MeE7RTTrYHkB0PbVuyPTqlrsFGgm5yB4tXnFGYbTExWIGQW/FhkalvPwOVWNaQ DSxpDdE0c+xQm5MsC52K960JFF6wN2XN2rSpjDEkLhqOo90EQfPnJLNsnhwLWCfm 2KKC8qy6LLIFfBp6muRl6AwCxK1OgLewyFpq7GxvnrZ6v1//RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBF8m3VcRudNxMvqAOX2XtHs5rLoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNzEyY2UxODYtM2Y2NS0z YjAxLWJmOTctNDM4OTAzMDMxNzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIVBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8PHUnc6WikWn7MMmbuVKFbrkAoF9Os7MqNslp/kSdNuy1pbZzdqJkC zhzhsveD1wtZbslToBT3XG3nt+6AILBD8dIht8pJEctgOzkgRXvbJ2oBUchbb3n0 nOgGFPShugGLa5JjMg2jeW3crk9j9aQTiQ8/q99N6hKToiabwj4zbpoHVV9Tl7LG Vj9ffDpxBwu5raLGeYUgTMzcblJ8OJoRXrPQbUwNsFyF5AT5MZiZK9UnWBCnbggG L+DM2zHMor75Sqt+r5UtKe0OFua39RFUaI5pecSIPEarTXU7QNM1sRW23HVEh+lt /uuKGFfsXLmqqjTkD+21R0JnwpcjSjA= -----END CERTIFICATE-----Generated at Tue Apr 29 13:58:25 2025 by rpki-client